Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: g4BpO74ORCPaQWdgpvYHafbV/NnGQPAA2liA1jOjyQ4=
Subject key identifier: 39:79:53:2F:02:31:0D:E3:C2:53:28:1D:86:94:EA:D2:E3:FC:44:3C
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 019D28F223043344B7A27321D73ED4DA1E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 09B7
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: OzhKwN71a5EOgmoS1TxvbI7iLUQ.roa (hash: UMdzymruvfotkFYiGIjdIXyvlwL7DTcm4OFrb3LPVB0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: YfKeeXJK4haIzXislZg8R71TkziPu4FP/3IisGn2pWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:23:04:33:44:b7:a2:73:21:d7:3e:d4:da:1e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=3979532f02310de3c253281d8694ead2e3fc443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:10:26:63:cc:d7:61:cb:17:7e:6a:b7:f5:
34:92:03:4b:4c:9d:78:fa:3a:fb:ab:4d:6a:6a:64:
e1:6f:cf:02:bc:a0:66:97:2b:42:16:2c:15:48:87:
b9:31:20:70:66:23:99:60:9f:fa:6f:5e:a9:f3:b9:
1d:8d:d3:55:9a:86:86:40:85:ff:de:f1:af:94:7d:
7f:98:2c:35:7a:93:5d:1d:aa:f6:c5:6a:d5:77:54:
d3:a2:55:ec:58:b9:33:d2:3d:b8:fa:6f:71:d4:d0:
bf:3a:af:4c:ed:1c:00:ec:aa:92:47:07:cc:8c:e2:
88:64:ba:d3:60:db:99:80:dd:7e:38:e0:e2:da:42:
50:ab:45:e9:a2:8d:55:8d:43:ff:4d:3a:60:a3:5c:
ca:9c:a2:54:ea:49:f5:15:e8:c1:05:ad:b7:8c:da:
e2:eb:2b:d4:3e:46:b8:aa:c3:50:80:7e:06:fa:b1:
e5:ff:59:79:c1:1a:79:4c:b6:39:98:4e:90:01:c7:
80:94:3e:91:8e:a2:01:71:c6:83:59:c5:fd:f6:6e:
0a:b8:cc:f7:9b:f4:9c:82:b2:7e:82:88:45:2a:a9:
62:c8:9a:67:1b:1d:82:6d:6c:a7:fe:79:d0:b1:e5:
b4:61:2c:9d:26:da:19:15:f7:7a:d9:e3:8f:f9:fa:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:53:2F:02:31:0D:E3:C2:53:28:1D:86:94:EA:D2:E3:FC:44:3C
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6c:c1:47:28:1c:a4:6b:c3:b1:39:9e:0f:64:79:68:54:f3:
6c:2a:06:57:38:2e:b2:99:ae:86:a4:db:76:2d:0c:2b:71:82:
d4:df:29:aa:57:af:0d:ae:e7:f9:f9:5e:99:c7:7d:02:61:0e:
73:54:94:4a:ef:e9:9b:ec:30:d1:bb:8f:26:86:c7:3c:4e:84:
dc:e9:50:7e:9b:26:c1:ea:2b:58:26:e7:3d:cf:14:45:cf:36:
d0:f7:59:e9:ef:31:db:37:fc:51:ef:6c:73:4d:1d:3e:18:d4:
48:68:80:59:ac:8f:bc:53:f6:4f:cd:e1:76:8b:4c:d7:f4:61:
c3:d9:ac:09:59:ed:00:0f:f4:ae:4d:8c:40:92:6d:9f:35:94:
48:5c:63:92:5f:b9:4d:c0:c6:b0:1e:44:b7:09:32:6d:5d:e3:
59:68:e1:d1:cf:65:f4:7f:c0:64:ba:e1:a4:b9:4f:6d:ea:ab:
29:9b:22:27:ee:b9:54:c1:9a:f4:e4:8c:f8:53:c5:93:f4:d4:
1e:76:23:cb:e7:df:54:ee:be:26:90:ab:65:05:77:71:f7:35:
99:0e:73:e2:47:8c:01:a8:c4:84:81:6b:1c:bd:89:85:89:aa:
04:a6:8f:69:e9:cd:d3:44:97:bc:97:ad:b7:53:7c:c0:8d:1c:
74:43:41:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iMEM0S3onMh1z7U2h4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjYwMzI2MDcwMDUwWhcNMjYwMzI3MDcwMDUwWjAzMTEwLwYDVQQD
EygzOTc5NTMyZjAyMzEwZGUzYzI1MzI4MWQ4Njk0ZWFkMmUzZmM0NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4UQJmPM12HLF35qt/U0kgNLTJ14
+jr7q01qamThb88CvKBmlytCFiwVSIe5MSBwZiOZYJ/6b16p87kdjdNVmoaGQIX/
3vGvlH1/mCw1epNdHar2xWrVd1TTolXsWLkz0j24+m9x1NC/Oq9M7RwA7KqSRwfM
jOKIZLrTYNuZgN1+OODi2kJQq0Xpoo1VjUP/TTpgo1zKnKJU6kn1FejBBa23jNri
6yvUPka4qsNQgH4G+rHl/1l5wRp5TLY5mE6QAceAlD6RjqIBccaDWcX99m4KuMz3
m/ScgrJ+gohFKqliyJpnGx2CbWyn/nnQseW0YSydJtoZFfd62eOP+fosXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDl5Uy8CMQ3jwlMoHYaU6tLj/EQ8MB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGzBRygc
pGvDsTmeD2R5aFTzbCoGVzguspmuhqTbdi0MK3GC1N8pqlevDa7n+flemcd9AmEO
c1SUSu/pm+ww0buPJobHPE6E3OlQfpsmweorWCbnPc8URc820PdZ6e8x2zf8Ue9s
c00dPhjUSGiAWayPvFP2T83hdotM1/Rhw9msCVntAA/0rk2MQJJtnzWUSFxjkl+5
TcDGsB5EtwkybV3jWWjh0c9l9H/AZLrhpLlPbeqrKZsiJ+65VMGa9OSM+FPFk/TU
HnYjy+ffVO6+JpCrZQV3cfc1mQ5z4keMAajEhIFrHL2JhYmqBKaPaenN00SXvJet
t1N8wI0cdENBow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:28 2026 by rpki-client